Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117A99/715A5556D9B711EBB1D53B20C4F9AE02/E2B5A370D9B911EBAE152524C4F9AE02.roa
File: E2B5A370D9B911EBAE152524C4F9AE02.roa (raw, json)
Hash identifier: oaOKaxC+tMkiJ3/NN8/kEy2yyfFPGGj/xhyEuSDCLPc=
Subject key identifier: EF:4F:37:C3:6A:BF:EA:55:72:5D:49:D3:64:9A:0F:69:EC:4D:9F:F8
Certificate issuer: /CN=A9117A99/serialNumber=FBD63A57E900C2277BF417FDAB332B78CAF923E9
Certificate serial: 0149
Authority key identifier: FB:D6:3A:57:E9:00:C2:27:7B:F4:17:FD:AB:33:2B:78:CA:F9:23:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9Y6V-kAwid79Bf9qzMreMr5I-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117A99/715A5556D9B711EBB1D53B20C4F9AE02/E2B5A370D9B911EBAE152524C4F9AE02.roa
Signing time: Mon 13 Dec 2021 02:41:32 +0000
ROA not before: Mon 13 Dec 2021 02:41:32 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 131111
IP address blocks: 103.78.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117A99/serialNumber=FBD63A57E900C2277BF417FDAB332B78CAF923E9
Validity
Not Before: Dec 13 02:41:32 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61b6b2dc-e930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:3f:cb:0b:6e:61:8f:1e:de:1d:29:0c:7d:
79:11:5f:01:9a:10:a3:9e:aa:74:39:a9:68:f1:c0:
c1:71:f8:5b:11:3b:ef:8d:62:bc:fc:9a:9e:f1:99:
1e:4f:bd:39:f8:f4:98:b2:36:7c:1f:24:87:4b:a1:
17:ee:3b:b6:15:ce:8f:aa:0b:02:8d:27:e7:b1:85:
1b:f5:b6:79:6e:df:72:36:ba:be:78:e7:59:89:7d:
02:8c:92:92:34:04:fb:c2:fb:63:d6:8c:9f:71:a8:
81:54:8c:78:79:1b:85:4a:e9:08:b3:71:5f:02:f6:
cd:1c:39:f5:66:56:ae:1d:b2:f8:7f:09:0e:6d:d3:
a7:8f:df:a4:1d:44:e4:3b:e1:ca:bb:74:1c:a1:2a:
3d:d5:6c:68:cc:d0:61:f3:d6:e9:b8:58:af:fc:d6:
77:8d:43:dd:07:89:d5:a4:25:c6:80:e6:ee:0e:6b:
27:8d:e7:38:df:1c:66:de:b9:ab:f1:9f:37:60:28:
c0:16:d0:69:ce:16:17:2d:d5:c2:e0:1b:a2:1b:16:
00:82:3d:f3:57:37:c2:19:fe:1e:54:79:a4:ff:32:
b2:e0:1f:17:e7:17:3b:0a:ab:72:cb:77:9a:8f:9e:
13:1b:da:90:d5:64:b9:19:28:55:bd:7d:82:78:76:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4F:37:C3:6A:BF:EA:55:72:5D:49:D3:64:9A:0F:69:EC:4D:9F:F8
X509v3 Authority Key Identifier:
keyid:FB:D6:3A:57:E9:00:C2:27:7B:F4:17:FD:AB:33:2B:78:CA:F9:23:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117A99/715A5556D9B711EBB1D53B20C4F9AE02/-9Y6V-kAwid79Bf9qzMreMr5I-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9Y6V-kAwid79Bf9qzMreMr5I-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117A99/715A5556D9B711EBB1D53B20C4F9AE02/E2B5A370D9B911EBAE152524C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:77:31:0f:ca:c5:29:b6:e8:ad:1d:c2:99:cd:ad:86:eb:56:
f8:75:16:b4:f9:63:45:ba:b8:d6:ee:e6:63:5c:cd:99:7b:6c:
30:a6:a9:2d:32:ff:fb:57:99:fa:72:ff:09:5b:21:9c:ad:82:
84:dd:6f:0a:2f:f6:6d:b6:54:b7:e5:25:71:0e:e5:3d:9a:a0:
e9:4e:0c:d0:4a:5e:f7:1b:40:e1:be:21:db:75:4a:8e:4e:6c:
69:70:ce:d4:49:79:d6:11:49:e1:71:31:bd:0a:44:91:f0:bd:
2a:fe:f9:91:42:76:39:83:2d:a8:de:6b:1d:f2:a0:0a:72:03:
98:c4:4e:bf:58:ee:39:5e:d4:f2:b1:17:f6:1a:40:86:b6:f9:
e4:55:2b:a6:06:36:65:f4:a0:25:56:7a:57:69:5b:8d:c9:59:
97:c7:e8:32:30:05:57:4e:48:50:05:54:e6:38:56:13:e8:12:
e5:b0:9e:b5:ca:e2:b9:dc:15:bb:a8:16:66:29:76:e6:fe:9a:
9f:b3:6b:46:f5:98:5a:40:08:06:9c:db:31:22:6f:16:b6:e9:
a4:9f:d7:39:c2:15:6e:bd:5c:b2:cf:eb:ca:01:90:7b:4a:60:
01:e7:a2:37:8e:e9:05:9a:f1:09:98:bc:fb:a8:50:5f:1b:0d:
8d:85:a4:0c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdBOTkxMTAvBgNVBAUTKEZCRDYzQTU3RTkwMEMyMjc3QkY0MTdGREFCMzMyQjc4
Q0FGOTIzRTkwHhcNMjExMjEzMDI0MTMyWhcNMjMwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWI2YjJkYy1lOTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmg/ywtuYY8e3h0pDH15EV8BmhCjnqp0Oalo8cDBcfhbETvvjWK8/Jqe8Zke
T705+PSYsjZ8HySHS6EX7ju2Fc6PqgsCjSfnsYUb9bZ5bt9yNrq+eOdZiX0CjJKS
NAT7wvtj1oyfcaiBVIx4eRuFSukIs3FfAvbNHDn1ZlauHbL4fwkObdOnj9+kHUTk
O+HKu3QcoSo91WxozNBh89bpuFiv/NZ3jUPdB4nVpCXGgObuDmsnjec43xxm3rmr
8Z83YCjAFtBpzhYXLdXC4BuiGxYAgj3zVzfCGf4eVHmk/zKy4B8X5xc7Cqtyy3ea
j54TG9qQ1WS5GShVvX2CeHY0IwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO9PN8Nq
v+pVcl1J02SaD2nsTZ/4MB8GA1UdIwQYMBaAFPvWOlfpAMIne/QX/aszK3jK+SPp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0E5OS83MTVBNTU1NkQ5
QjcxMUVCQjFENTNCMjBDNEY5QUUwMi8tOVk2Vi1rQXdpZDc5QmY5cXpNcmVNcjVJ
LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy05WTZWLWtBd2lkNzlCZjlxek1yZU1yNUktay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTdBOTkvNzE1QTU1NTZEOUI3MTFFQkIxRDUzQjIwQzRGOUFFMDIvRTJCNUEzNzBE
OUI5MTFFQkFFMTUyNTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnTiQwDQYJKoZIhvcNAQELBQADggEBAB93MQ/KxSm26K0d
wpnNrYbrVvh1FrT5Y0W6uNbu5mNczZl7bDCmqS0y//tXmfpy/wlbIZytgoTdbwov
9m22VLflJXEO5T2aoOlODNBKXvcbQOG+Idt1So5ObGlwztRJedYRSeFxMb0KRJHw
vSr++ZFCdjmDLajeax3yoApyA5jETr9Y7jle1PKxF/YaQIa2+eRVK6YGNmX0oCVW
eldpW43JWZfH6DIwBVdOSFAFVOY4VhPoEuWwnrXK4rncFbuoFmYpdub+mp+za0b1
mFpACAac2zEibxa26aSf1znCFW69XLLP68oBkHtKYAHnojeO6QWa8QmYvPuoUF8b
DY2FpAw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org